Announcement

Collapse
No announcement yet.

GPO Loopback Processing

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • GPO Loopback Processing

    Can anyone tell what exactly you would use the loopback processing for and a possible example. I don't full understand its purpose in GP.

  • #2
    Re: GPO Loopback Processing

    Imagine an Organizational Unit structure like this:


    Computer OU (Computer GPO linked here)
    ------------ --->Computer account


    User OU (User GPO linked here)
    ------- -> User account

    Now some GPO Basics to set the stage:

    Computer Configuration settings apply to Computer objects. Group Policies linked to OU's or containers where Computer objects exist will apply the Computer Configuration settings of those GPO's to those computer objects. User Configuration settings in those GPO's don't get applied to the users logging on to those computers because the user objects don't exist in that OU. GPO's only apply to objects in their Scope of Management (SoM - meaning the object has to be in the "path" of the GPO).

    User Configuration settings apply to User objects. Group Policies linked to OU's or containers where User objects exist will apply the User Configuration settings of those GPO's to those user objects. Computer Configuration settings in those GPO's don't get applied to the computers that the user is logging on to because the computer objects don't exist in that OU. GPO's only apply to objects in their Scope of Management (SoM - meaning the object has to be in the "path" of the GPO).

    Loopback policy processing is typically used when you want the User configuration settings of a GPO linked to a computer object to apply to users logging on to those computers, instead of or in addition to the users normal GPO settings.


    Now imagine that you have a user (userA) that logs onto a computer (computerA). The typical GPO processing is as such:

    For computerA apply the Computer Configuration settings from the GPO linked to the Computer OU.

    For userA apply the User Configuration settings from the GPO linked to the User OU.

    With loopback policy processing you'll apply the User Configration settings of the GPO linked to the Computer OU to userA when he/she logs onto computerA. Loopback policy processing can be configured to merge or replace the users normal GPO settings (from the GPO linked to the User OU). Merge says "merge these GPO settings with the users normal GPO settings". Replace says "replace the users normal GPO settings with these GPO settings".

    So in a nutshell, Loopback policy processing is used when you want to apply different (or additional) GPO settings to a user based on the computer that the user logs on to.
    Last edited by joeqwerty; 6th January 2013, 19:35.

    Comment

    Working...
    X